pdurlej/platform

Fork 0

test(dr): record post-M04 restore refresh #624

Merged

pdurlej merged 2 commits from codex/m02-post-m04-dr-refresh into main

2026-05-30 04:10:47 +02:00

codex commented

2026-05-30 03:55:29 +02:00

Collaborator

Canary status: pending — Forgejo checks will run on this PR.

Canary Context Pack

Product story

Before any Vault quarantine or destruction, M02 needs fresh restore evidence from the topology after M01/M04. This PR records that evidence.

What changed

Added aggregate M02 post-M04 DR refresh report.
Added vps1000 sandbox DR report generated from the fresh post-M04 critical backup.

Why it changed

Claude Opus review correctly asked to move DR refresh before Vault destruction and to make last-dependency evidence explicit. #619/#610/#622 are merged, so the next safe step is recording DR evidence.

Files touched

state/reports/m02-post-m04-dr-refresh-2026-05-30.md
state/reports/m02-post-m04-vps1000-sandbox-drill-2026-05-30.md

Runtime evidence

Non-destructive evidence only:

Fresh RS2000 critical backup from current topology: PASS.
Forgejo restore smoke from fresh backup: PASS.
Honcho partial pgvector restore: PASS.
vps1000 isolated Docker sandbox restore: PASS.
safe-session local CA preflight: PASS.
Vault sunset readiness: PASS.
Unhealthy containers after checks: 0.
Disposable restore containers/staging left behind: 0.

Known constraints

Vault remains running as rollback material. This PR does not authorize quarantine or destruction.

Explicit out-of-scope

No Vault stop.
No Vault deletion.
No backup deletion.
No secret value output.
No issue/comment writer beyond status evidence.

Requested decision

Approve/merge if checks are green. This should close #623 and unblock the separate operator decision for m04-vault-quarantine-approved.

Merge blockers

Any evidence of private data leakage, destructive cleanup, leftover sandbox resources, or missing restore pass.

Spec sources read

runbooks/dr-restore-test.md — DR expectations.
runbooks/vault-quarantine-and-sunset.md — quarantine/destruction gate.
runbooks/safe-session-local-ca-cutover.md — active signer topology.
scripts/dr/w3d-disposable-vps-drill.sh — vps1000 sandbox wrapper.
scripts/dr/w3d-local-sandbox-drill.sh — restore choreography.

Closes #623

Canary status: pending — Forgejo checks will run on this PR. ## Canary Context Pack ### Product story Before any Vault quarantine or destruction, M02 needs fresh restore evidence from the topology after M01/M04. This PR records that evidence. ### What changed - Added aggregate M02 post-M04 DR refresh report. - Added vps1000 sandbox DR report generated from the fresh post-M04 critical backup. ### Why it changed Claude Opus review correctly asked to move DR refresh before Vault destruction and to make last-dependency evidence explicit. #619/#610/#622 are merged, so the next safe step is recording DR evidence. ### Files touched - state/reports/m02-post-m04-dr-refresh-2026-05-30.md - state/reports/m02-post-m04-vps1000-sandbox-drill-2026-05-30.md ### Runtime evidence Non-destructive evidence only: - Fresh RS2000 critical backup from current topology: PASS. - Forgejo restore smoke from fresh backup: PASS. - Honcho partial pgvector restore: PASS. - vps1000 isolated Docker sandbox restore: PASS. - safe-session local CA preflight: PASS. - Vault sunset readiness: PASS. - Unhealthy containers after checks: 0. - Disposable restore containers/staging left behind: 0. ### Known constraints Vault remains running as rollback material. This PR does not authorize quarantine or destruction. ### Explicit out-of-scope - No Vault stop. - No Vault deletion. - No backup deletion. - No secret value output. - No issue/comment writer beyond status evidence. ### Requested decision Approve/merge if checks are green. This should close #623 and unblock the separate operator decision for `m04-vault-quarantine-approved`. ### Merge blockers Any evidence of private data leakage, destructive cleanup, leftover sandbox resources, or missing restore pass. ## Spec sources read - runbooks/dr-restore-test.md — DR expectations. - runbooks/vault-quarantine-and-sunset.md — quarantine/destruction gate. - runbooks/safe-session-local-ca-cutover.md — active signer topology. - scripts/dr/w3d-disposable-vps-drill.sh — vps1000 sandbox wrapper. - scripts/dr/w3d-local-sandbox-drill.sh — restore choreography. Closes #623

codex added 1 commit

2026-05-30 03:55:29 +02:00

test(dr): record post-M04 restore refresh

canary-required / collect-diff (pull_request) Successful in 5s

Details

patchwarden-client-dry-run / collect-diff (pull_request) Successful in 4s

Details

canary-required / canary (pull_request) Has been skipped

Details

patchwarden-client-dry-run / dry-run (pull_request) Successful in 1m1s

Details

base-is-main / guard (pull_request) Successful in 1s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 5s

Details

patchwarden-pr-sanity / sanity (pull_request) Has been cancelled

Details

42aff6b43f

codex added the

agent/codex

class/security-sensitive

source/agent-generated

tier/full

labels

2026-05-30 03:55:42 +02:00

codex added this to the 02 - DR and restore confidence milestone

2026-05-30 03:56:01 +02:00

codex commented

2026-05-30 03:59:43 +02:00

Author

Collaborator

Patchwarden PR sanity

Status: eligible_sanity_clean
PR: 624
Commit: c2089f2e095bcb22cdb6abff10a24ef7bb665773
Security-sensitive label: present
Authority: advisory model review plus deterministic blockers only
3+3 canary: still alive; this does not replace it

Deterministic findings

No deterministic findings.

Model reviewers

`global-glm` / `glm-5.1:cloud`

Status: ok
Verdict: OK
Findings: none

`global-deepseek` / `deepseek-v4-pro:cloud`

Status: ok
Verdict: OK
Findings: none

`redteam` / `kimi-k2.6:cloud`

Status: ok
Verdict: OK
Findings: none

Policy notes

GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot.
Optional red-team model is enabled only when PLATFORMCTL_PR_SANITY_REDTEAM_MODEL is configured.
Auto-merge is not enabled here.

# Patchwarden PR sanity - Status: `eligible_sanity_clean` - PR: `624` - Commit: `c2089f2e095bcb22cdb6abff10a24ef7bb665773` - Security-sensitive label: `present` - Authority: advisory model review plus deterministic blockers only - 3+3 canary: still alive; this does not replace it ## Deterministic findings No deterministic findings. ## Model reviewers ### `global-glm` / `glm-5.1:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `global-deepseek` / `deepseek-v4-pro:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ### `redteam` / `kimi-k2.6:cloud` - Status: `ok` - Verdict: `OK` - Findings: none ## Policy notes - GLM 5.1 + DeepSeek V4 Pro are the operator-required model mix for this bot. - Optional red-team model is enabled only when `PLATFORMCTL_PR_SANITY_REDTEAM_MODEL` is configured. - Auto-merge is not enabled here.

codex added 1 commit

2026-05-30 04:05:39 +02:00

chore(dr): retrigger post-M04 refresh checks

base-is-main / guard (pull_request) Successful in 2s

Details

canary-required / collect-diff (pull_request) Successful in 5s

Details

patchwarden-client-dry-run / collect-diff (pull_request) Successful in 5s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 5s

Details

canary-required / canary (pull_request) Has been skipped

Details

patchwarden-client-dry-run / dry-run (pull_request) Successful in 59s

Details

patchwarden-pr-sanity / sanity (pull_request) Successful in 1m44s

Details

c2089f2e09

pdurlej approved these changes

2026-05-30 04:10:46 +02:00

pdurlej left a comment

Operator-delegated approval for nondestructive M02 post-M04 DR refresh evidence. All Forgejo checks are green; local validate all and diff check passed; this records backup/restore evidence only and does not perform Vault quarantine/destruction.

pdurlej merged commit 5adfd2b887 into main

2026-05-30 04:10:47 +02:00

pdurlej referenced this pull request from a commit

2026-05-30 04:10:48 +02:00

Merge pull request #624

codex referenced this pull request

2026-05-30 04:11:44 +02:00

docs(migrations): vault-to-infisical Phase 1-5 execution #64